Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.cer
File:                     9361649E2A9CD6320D5D128742E2688A2D4E81F3.cer (raw, json)
Hash identifier:          uPwrLa3/I52fwRgagrg2e3kwWrK9UDa1TJjuUWDEbhE=
Subject key identifier:   93:61:64:9E:2A:9C:D6:32:0D:5D:12:87:42:E2:68:8A:2D:4E:81:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F44F0B55413DFFA97A2BD45CA4949A798C9C029
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:40:16 +0000
Certificate not after:    Tue 11 Feb 2025 12:45:16 +0000
Subordinate resources:    AS: 268199
                          IP: 45.235.196.0/22
                          IP: 2804:4d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:44:f0:b5:54:13:df:fa:97:a2:bd:45:ca:49:49:a7:98:c9:c0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:40:16 2024 GMT
            Not After : Feb 11 12:45:16 2025 GMT
        Subject: CN=9361649E2A9CD6320D5D128742E2688A2D4E81F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:a0:60:15:be:1b:11:37:7d:2f:6c:a9:df:
                    73:e2:37:7f:ac:72:4d:3d:7c:a1:d1:f9:54:8c:1e:
                    f1:75:72:80:1e:d3:ae:b1:78:73:5c:5c:53:b6:6c:
                    07:50:bc:90:c9:3c:0c:1e:d4:a0:fb:58:97:da:50:
                    e5:a1:4d:47:07:3e:66:30:df:b6:6f:46:ea:f3:75:
                    1c:cd:77:a1:48:54:8c:f3:4b:ae:4e:46:e6:a9:19:
                    7e:7e:81:be:1c:14:b6:96:c9:0e:08:f3:ab:69:91:
                    60:1d:90:1b:03:6f:94:86:5f:6e:a9:07:8b:99:21:
                    88:1b:56:8a:00:ea:86:36:25:5f:f4:ad:1f:7c:09:
                    8a:fa:6b:c5:8e:7d:81:0b:b2:af:94:fc:51:c2:06:
                    04:93:26:06:59:c2:94:cd:7f:da:cf:4d:12:f6:53:
                    e4:a7:d2:c5:ad:ff:77:10:be:46:eb:dc:28:53:3e:
                    c1:1a:2d:3c:d1:e7:e9:b7:d6:70:f2:7a:a9:5a:d4:
                    0a:50:bf:53:9a:47:81:8f:1c:00:e8:33:66:8e:51:
                    29:3f:49:f7:b6:ee:d3:15:0c:e5:7c:ed:2f:66:d4:
                    eb:99:62:05:b9:02:55:d5:b6:36:be:f3:be:5a:89:
                    70:3b:28:bc:19:d9:1e:85:3f:bb:65:12:72:89:41:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:61:64:9E:2A:9C:D6:32:0D:5D:12:87:42:E2:68:8A:2D:4E:81:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.196.0/22
                IPv6:
                  2804:4d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268199

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:fc:66:ed:0d:02:7e:f9:fe:5b:30:a4:93:07:ae:c2:aa:
         f4:30:7b:9b:b9:1b:6f:c9:da:c9:28:10:d6:3b:07:04:93:b3:
         4f:6b:48:83:6f:0b:ef:a3:11:5f:08:29:55:8b:8e:73:7d:8c:
         05:37:f0:71:96:c4:f4:15:36:15:9f:f0:63:82:20:2f:1d:03:
         df:f1:cd:cd:81:ef:ff:b7:f1:b4:cd:41:4a:94:b8:28:08:84:
         ef:2a:33:58:af:d4:f7:03:39:6c:d0:9d:66:ca:d5:20:3a:bf:
         ca:ca:7b:84:4c:cd:5e:3f:db:ae:55:d0:0b:2b:ef:ab:21:15:
         06:5d:28:db:2f:33:b6:0b:2d:b3:64:6d:e3:8f:dc:8b:1e:f2:
         cc:f6:24:9e:5e:09:66:fc:89:57:d5:47:9c:e5:76:de:c4:bf:
         99:ae:20:30:8e:3d:96:4a:36:a8:41:79:43:01:3b:96:98:09:
         37:93:ed:ba:52:f5:a8:b9:30:e4:da:78:be:c4:cf:d4:45:47:
         56:76:d0:eb:ef:3b:aa:3c:6b:fc:82:f8:d5:fd:1f:f4:e3:4a:
         70:a3:0c:04:27:4b:aa:a2:b7:f5:37:4f:47:b4:e8:1d:72:70:
         27:2a:3d:f1:27:f3:5a:b3:bc:70:0d:0b:f8:7e:15:de:28:85:
         fa:bf:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----